Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.mft
File: Ety44UEMjNGOUkV_fhqVgNbaUiY.mft (raw, json)
Hash identifier: LntKFY0P+4CB75ER4Rj0uDexYxJbOknDRnF7LsrgQcA=
Subject key identifier: 7E:D6:B0:91:2A:54:44:2B:5C:5C:F2:4A:9E:F5:14:6F:89:56:D1:61
Authority key identifier: 12:DC:B8:E1:41:0C:8C:D1:8E:52:45:7F:7E:1A:95:80:D6:DA:52:26
Certificate issuer: /CN=12dcb8e1410c8cd18e52457f7e1a9580d6da5226
Certificate serial: 019A51F5DDC7633903F397221C96E94079C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ety44UEMjNGOUkV_fhqVgNbaUiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.mft
Manifest number: 0650
Signing time: Wed 05 Nov 2025 03:00:58 +0000
Manifest this update: Wed 05 Nov 2025 03:00:58 +0000
Manifest next update: Thu 06 Nov 2025 03:00:58 +0000
Files and hashes: 1: Ety44UEMjNGOUkV_fhqVgNbaUiY.crl (hash: iUrHN7nio7mAYvuiWm9rCtn710IxxYQXLzQ1ocnYoe8=)
2: jEDgNY90eysDT0Y1G-THT17h3-Q.roa (hash: RQYyUb9Y/6KY2/ltxA8FrdBGYW0gmfS1ieQyM7fG8UY=)
3: xjaKNbUWdjhuGKz557km09J85CQ.roa (hash: 3QMey7VrmUqxE6MUlNjFiwNKaAhFddLFlNFaj03POhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ety44UEMjNGOUkV_fhqVgNbaUiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:dd:c7:63:39:03:f3:97:22:1c:96:e9:40:79:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12dcb8e1410c8cd18e52457f7e1a9580d6da5226
Validity
Not Before: Nov 5 03:00:58 2025 GMT
Not After : Nov 6 03:00:58 2025 GMT
Subject: CN=7ed6b0912a54442b5c5cf24a9ef5146f8956d161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7f:49:b5:d3:93:2b:b5:cf:c1:df:ae:88:e1:
6e:0a:b5:2d:98:1d:1e:07:8b:91:72:3e:2d:83:2a:
86:2e:78:a0:c7:e3:38:43:d8:47:0a:aa:7f:d4:a0:
7b:29:40:95:88:83:5d:1b:6f:36:15:cf:8f:df:82:
42:48:c8:b5:7e:3c:fc:7f:be:c0:76:4c:bb:1f:61:
e0:61:08:d3:b9:9e:46:62:a6:28:bd:be:16:87:eb:
c4:66:ba:33:49:da:3a:e5:93:8d:2a:73:24:68:85:
a2:12:41:0c:0b:e8:b2:6a:a1:4d:ff:fb:43:4d:39:
e6:0e:64:fc:b0:05:76:b4:e4:09:e3:4a:30:9f:0c:
e0:91:e8:49:0e:00:f2:3a:4c:c4:e9:aa:91:41:52:
76:57:5a:96:19:d7:1b:97:41:29:0f:5c:dd:06:a2:
53:46:5a:a6:2a:cb:a2:1c:1d:fe:8f:5d:ab:13:c8:
a6:8a:b7:72:ef:5a:9d:d2:e1:cb:97:5c:6c:b4:47:
79:1a:1c:32:5c:1d:1d:04:df:f5:14:5c:3c:34:92:
5f:f3:c0:e3:8b:3e:0e:a2:e8:6b:01:e2:74:a9:71:
64:68:df:3e:d1:44:be:a0:98:61:7a:f4:a2:0c:9e:
19:83:10:cb:ed:7c:1d:e6:e5:59:fb:56:f1:03:e2:
6e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D6:B0:91:2A:54:44:2B:5C:5C:F2:4A:9E:F5:14:6F:89:56:D1:61
X509v3 Authority Key Identifier:
keyid:12:DC:B8:E1:41:0C:8C:D1:8E:52:45:7F:7E:1A:95:80:D6:DA:52:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ety44UEMjNGOUkV_fhqVgNbaUiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:03:db:83:85:5e:9e:43:3a:dd:3f:66:9f:85:5d:a7:c9:e5:
85:ab:27:b3:9f:cc:9a:31:11:e5:41:ae:3a:5a:54:45:0b:7f:
17:01:77:30:f0:cc:fb:05:a9:4e:10:83:58:39:b2:6f:a2:64:
12:b4:b8:da:b8:6c:9b:cc:39:e4:f8:b2:1a:3e:8f:85:b4:4a:
af:d4:97:10:94:cf:af:12:16:dd:db:2f:11:d3:bd:31:33:4e:
3f:18:dd:21:e4:11:7a:7d:e3:7a:d1:67:c7:db:c9:ac:3f:43:
e9:5d:a3:8e:44:fc:f6:b8:5a:94:65:b2:9b:c8:cc:b9:13:c3:
df:97:c7:c0:9b:7e:52:48:d0:8e:bd:34:d2:b3:51:b0:41:15:
7c:04:14:b9:24:2e:f5:39:a8:1a:96:15:36:df:14:ac:bb:c2:
b4:3e:b5:31:ce:e1:f6:d0:61:2d:c1:15:71:d2:bc:93:a3:9a:
04:35:e4:b9:80:c1:01:ef:36:a7:2b:ab:e1:32:6b:bd:67:51:
16:64:f9:a3:53:c1:2d:c8:24:de:8a:56:8c:7f:e5:07:6e:a1:
25:f9:bb:6d:9d:8a:84:9a:ac:b9:aa:47:30:9e:42:a6:92:cf:
b1:84:ba:52:77:9b:c3:54:ba:f0:74:05:43:82:2c:05:56:e8:
6f:46:3c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:32:28 2025 by rpki-client